Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gTQVw15JaqRf8D7E7itgHRvZZA0.roa
File: gTQVw15JaqRf8D7E7itgHRvZZA0.roa (raw, json)
Hash identifier: 0H/ZNnnQ12aLKKd15vCm/CB25dSJgBldKncEyIlVTfU=
Subject key identifier: 81:34:15:C3:5E:49:6A:A4:5F:F0:3E:C4:EE:2B:60:1D:1B:D9:64:0D
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0427639E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gTQVw15JaqRf8D7E7itgHRvZZA0.roa
Signing time: Sat 01 Jan 2022 12:04:54 +0000
ROA not before: Sat 01 Jan 2022 12:04:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35783
IP address blocks: 193.233.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69690270 (0x427639e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:04:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=813415c35e496aa45ff03ec4ee2b601d1bd9640d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:ea:5d:32:ba:d6:fd:52:7e:5d:18:8d:cf:
f7:40:71:3b:ce:8e:9b:89:78:98:8e:d8:b6:88:76:
e4:c9:ad:a0:4f:76:6a:54:d7:fc:81:63:e3:d0:67:
84:69:91:6d:2e:9b:b8:74:80:80:a1:ae:c1:85:b6:
76:fd:54:39:c9:f0:6d:4e:d2:7e:60:4d:e4:b0:9f:
7b:2c:9b:ea:29:e3:ad:e7:76:12:7c:9f:67:af:ec:
fe:21:8d:1d:e3:49:84:2e:53:35:42:51:13:7b:6b:
ea:30:bc:b2:52:5b:da:0d:d8:8a:e3:75:95:46:b5:
c4:b8:25:23:9f:30:a3:72:d3:63:cf:4f:17:e3:ed:
c7:57:e5:bb:19:5e:30:95:c6:f6:ef:28:7b:8c:fb:
ef:ba:2c:52:a0:df:9d:5a:bf:dd:4c:bf:4a:b0:b4:
7c:09:9c:a9:43:55:15:64:95:05:3a:20:d8:54:d7:
6b:54:bc:24:fb:2d:21:f1:4d:c9:49:e8:ca:ec:1c:
76:4f:26:2f:4b:2f:23:70:67:4d:da:61:f3:9a:bd:
2f:25:77:69:e7:86:38:66:55:3e:43:30:ef:7d:8c:
52:3b:c6:8b:4a:04:de:8b:b4:dc:d0:c0:d9:9d:d6:
8e:6c:5f:bc:61:cc:73:43:22:75:db:15:c8:bf:f1:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:15:C3:5E:49:6A:A4:5F:F0:3E:C4:EE:2B:60:1D:1B:D9:64:0D
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gTQVw15JaqRf8D7E7itgHRvZZA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.173.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6c:4f:d4:18:7d:ec:f5:2c:80:47:8c:77:21:e7:9f:67:bf:
9b:9a:af:c1:28:02:fd:5d:5e:22:c6:b1:49:96:da:e4:07:38:
b9:62:89:3c:60:f8:93:a0:6e:be:1b:9a:a4:91:48:67:82:26:
bb:d0:bc:32:2b:2c:0e:90:2c:e6:bb:42:67:35:3f:bf:fa:5d:
4c:37:5b:fa:19:6b:f8:24:d9:a6:5b:fb:b8:97:8d:ae:2c:3f:
29:9a:68:91:ab:c4:fc:aa:d4:3b:8a:fa:e0:e8:47:8d:33:48:
fe:90:4a:94:aa:56:39:c0:e1:35:b3:1f:81:6b:b3:75:70:69:
93:e8:dc:c0:c1:d5:82:76:ed:62:23:e2:53:97:a6:6a:eb:76:
2d:6d:dc:b5:3e:67:33:d7:39:61:11:ff:8c:ad:88:9e:16:67:
80:3a:da:cd:83:a8:75:57:f3:e7:70:6a:a9:8b:35:9c:a6:4a:
7c:ed:37:a4:24:50:ae:de:83:1c:8c:b4:1a:90:53:78:c7:44:
3f:1d:01:9b:51:44:85:a8:5c:5f:b4:49:d0:b3:ec:2d:d5:46:
4e:a3:f7:fa:a2:92:91:5d:c1:05:a7:3d:d2:6d:14:d1:16:4b:
7b:cd:e4:a4:17:12:1b:23:d0:03:2a:b4:fe:0b:e2:eb:8c:85:
d1:07:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:39 2024 by rpki-client on console-fra.rpki-client.org